1. Scope and responsibility
This Privacy Policy explains how Gold Trading Desk ("GTD", "we", "us", or "our") handles personal information when you visit goldtradingdesk.com, create an account, use the member portal, enroll in an educational programme, communicate with the institution, or use related services.
The data controller is Mazen Al Adgham, operating Gold Trading Desk from Lebanon. Formal business registration particulars and a business address will be published upon completion of registration. Privacy requests may be sent to support@goldtradingdesk.com.
Gold Trading Desk is an educational institution focused on XAUUSD market education. It does not provide brokerage, investment-management, signal, or financial-advisory services.
2. Information we collect
We collect information you provide directly, information created through your academic activity, and limited technical information necessary to operate and secure the platform.
- Identity and account information, including your name, email address, profile details, authentication provider, and internal user identifier.
- Academic records, including enrollment status, curriculum progress, completed lectures, assessments, journal entries, credentials, and certificates.
- Enrollment and payment records, including programme, amount, currency, payment identifier, settlement status, timestamps, and transaction references. We do not receive or store your private wallet keys.
- Correspondence submitted to our admissions, support, partnership, or general offices.
- Public Support records, including the name, email address, category, subject, message history, verification timestamp, case status, and secure access token associated with an enquiry. Submitting a public enquiry does not create a member account.
- Institutional Briefing records, including the submitted email address, subscription source, consent and confirmation timestamps, status, and withdrawal record.
- Optional Auction Thinking Diagnostic responses, calculated profile and dimension scores, the name and email you provide to preserve a result, consent timestamp, and limited referral or campaign attribution.
- Technical and usage information, such as browser type, device information, authentication events, error records, security logs, and pages requested.
- Local preferences stored in your browser, such as theme selection, tour state, and certain curriculum-progress indicators.
3. Google sign-in data
If you choose Continue with Google, Google provides the minimum identity information needed to authenticate you and establish your GTD account. Depending on your Google profile and consent, this may include your name, email address, profile image, and a Google account identifier.
We use this information only to authenticate you, associate you with your member record, secure your session, provide account access, and communicate about the service. Gold Trading Desk does not request access to your Gmail messages, Google Drive files, contacts, calendar, Google password, or unrelated Google account data.
Google user data is not sold, used for advertising, or shared for independent marketing. It may be processed by our authentication and infrastructure providers only as necessary to operate and secure the platform. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
4. Purposes and lawful bases
Depending on the activity and applicable law, we process information because it is necessary to provide the service or perform a contract, because you have given consent, because we must comply with legal obligations, or because GTD has a legitimate interest in security, service administration, academic integrity, communication, and restrained measurement that does not override your rights.
We do not use solely automated decision-making that produces legal or similarly significant effects. Assessment calculations and diagnostic profiles may be automated, but academic decisions and material account actions remain subject to defined rules or human review.
5. How we use information
- Create, authenticate, maintain, and protect member accounts.
- Administer admissions, enrollment, programme access, progress, assessment, credential, and certificate records.
- Create and monitor cryptocurrency payment requests and confirm settlement status.
- Provide private member support, verify public enquiries, and respond to institutional correspondence.
- Send transactional, security, enrollment, and service-related communications.
- Send the Institutional Briefing only after explicit request and email confirmation, and preserve withdrawal records so future publication email is not issued.
- Calculate, preserve, and deliver an Auction Thinking Diagnostic result when you expressly request it, and measure which educational entry points introduce visitors to GTD.
- Maintain platform reliability, investigate errors, prevent abuse, and enforce institutional standards.
- Comply with applicable legal obligations and protect the rights, safety, and integrity of GTD and its members.
6. Service providers and disclosures
We use carefully selected providers to operate authentication, hosting, database, email, security, analytics, and cryptocurrency-payment functions. These providers process information on our behalf or under their own terms when you elect to use their service.
- Google, when you choose Google sign-in.
- Lovable Cloud and its underlying infrastructure, for application hosting, authentication, database, and related platform services.
- NOWPayments and relevant blockchain networks, when you initiate a cryptocurrency payment.
- Email-delivery and infrastructure providers, for authentication and transactional messages.
- Professional advisers, regulators, courts, or authorities when disclosure is required by law or reasonably necessary to protect legal rights and platform security.
7. Retention and security
Account-linked support records are generally retained while the account is active and for a reasonable period afterward. Public enquiry records are retained for a reasonable period after resolution. Academic credentials, certificate verification, payment, fraud-prevention, consent, and decision records may be retained longer where needed to preserve institutional integrity, document transactions, resolve disputes, or meet legal obligations. Diagnostic records and optional marketing-contact details are removed or anonymized when no longer reasonably needed for their stated purpose.
We apply reasonable administrative, technical, and organizational safeguards, including access controls, protected credentials, encrypted transport, and restricted service access. No internet service or storage system can guarantee absolute security.
8. Your choices, complaints, and requests
Subject to applicable law and legitimate recordkeeping requirements, you may request access to, correction of, or deletion of your personal information. You may also ask questions about our processing or withdraw consent where consent is the applicable basis.
You can revoke Gold Trading Desk access from your Google Account permissions. Revocation stops future Google authorization but does not automatically delete the GTD account or records already required for academic, transaction, security, or legal purposes. Contact us if you also want your GTD account reviewed for deletion.
Send privacy and account-deletion requests to support@goldtradingdesk.com from the email address associated with your account. We may need to verify your identity before acting on a request.
Where applicable, you may object to processing, request restriction or portability, and complain to the competent data-protection authority in your place of residence. Because the operator is in Lebanon, the appropriate authority and remedy may depend on the law governing your particular request.
9. International processing
Our members and service providers may be located in different countries. Information may therefore be processed outside your country of residence, where privacy laws may differ. We use appropriate service arrangements and safeguards where required.
10. Browser storage, analytics, and referral attribution
Essential browser storage supports authentication, security, theme and interface preferences, curriculum state, and your privacy choice. Referral attribution may store a first-party partner reference for a limited period so an eligible introduction can be recorded.
Google Analytics loads only after you allow optional services through the privacy control. Google signals and advertising personalization are disabled. Public Support is a first-party service and remains available when Essential Only is selected. You may withdraw analytics permission at any time through Privacy Choices in the footer; withdrawal applies to future optional processing and does not erase records already lawfully retained.
11. Children
Gold Trading Desk is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact support@goldtradingdesk.com.
12. Changes and contact
We may update this policy to reflect changes in the platform, providers, practices, or applicable requirements. The revised policy will be posted here with an updated effective date.
Privacy enquiries: support@goldtradingdesk.com. General correspondence: hello@goldtradingdesk.com.